Skip to Content
InvyteDocs
Organization & access

Create a role

Add a role to the organization with the capabilities it grants. It reaches nobody until it is given (access.assign). Admins only.

POST
/operations/access.createRole

Authorization

bearer
headerAuthorizationBearer <API key or OAuth token>

An organization API key (ink_live_…, ADR-0124), or the OAuth access token a person's AI client gets from the Recruiter MCP sign-in. Only the Authorization header is accepted.

Header Parameters

Idempotency-Key?string

Makes a write safe to repeat: the same key and input return the first result. Required for agents' writes and for anything a person confirms.

Match^[A-Za-z0-9._:-]+$
Length8 <= length <= 128

Request Body

application/json
  1. body
input*
confirmation?string

The id from a confirm or awaiting_approval Outcome, sent with the same input and key to go ahead.

Response Body

Done. A replay of the same key and input omits output.

application/json
  1. response
status*unknown
output?
replay?
actionId*string
Example Request
curl -X POST 'https://www.invyte.ai/api/recruiter/v1/operations/access.createRole' \  -H 'Content-Type: application/json' \  -d '{  "input": {    "name": "string",    "capabilities": [      "job.create"    ]  }}'
Example Response
{  "status": "done",  "output": {    "roleId": "string"  },  "replay": {    "roleId": "string"  },  "actionId": "string"}

Give a role POST

Give a member of the organization a role on a Job, on a Client, or (admins) organization-wide. You can give only roles whose capabilities you hold there yourself.

Delete a role POST

Delete a role: everyone holding it loses it, everywhere. Undoing it later brings back only assignments whose person, Job or Client still exists. Admins only. Shows who loses what before it is done.